Login Request a demo
LR
Product
LR350
by Totolink · last CVE Mar 27, 2026
36
CVEs
0
On KEV
9.8
Max CVSS
0
New 30D
Vulnerabilities36In the news0Timeline
Severity mix
Critical 14High 22Medium 0Low 0
Severity
All severities36Critical14High22Medium0Low0
Exploitation
On CISA KEV0Exploited in the wild0
Watch

Add LR350 to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2024-42967
9.8
1%
Aug 15
Incorrect access control in TOTOLINK LR350 V9.3.5u.6369_B20220309 allows attackers to obtain the apmib configuration file, which contains the username and the password, via a…
Affected: 9.3.5u.6369_b20220309
CVE-2024-36783
9.8
1%
Jun 3
TOTOLINK LR350 V9.3.5u.6369_B20220309 was discovered to contain a command injection via the host_time parameter in the NTPSyncWithHost function
Affected: 9.3.5u.6369_b20220309
CVE-2024-35387
9.8
6%
May 24
TOTOLINK LR350 V9.3.5u.6369_B20220309 was discovered to contain a stack overflow via the http_host parameter in the function loginAuth
Affected: 9.3.5u.6369_b20220309
CVE-2024-35099
9.8
1%
May 14
TOTOLINK LR350 V9.3.5u.6698_B20230810 was discovered to contain a stack overflow via the password parameter in the function loginAuth
Affected: 9.3.5u.6698_b20230810
CVE-2023-37149
9.8
2%
Jul 7
TOTOLINK LR350 V9.3.5u.6369_B20220309 was discovered to contain a command injection vulnerability via the FileName parameter in the setUploadSetting function
Affected: 9.3.5u.6369_b20220309
CVE-2023-37148
9.8
2%
Jul 7
TOTOLINK LR350 V9.3.5u.6369_B20220309 was discovered to contain a command injection vulnerability via the ussd parameter in the setUssd function
Affected: 9.3.5u.6369_b20220309
CVE-2023-37146
9.8
2%
Jul 7
TOTOLINK LR350 V9.3.5u.6369_B20220309 was discovered to contain a command injection vulnerability via the FileName parameter in the UploadFirmwareFile function
Affected: 9.3.5u.6369_b20220309
CVE-2023-37145
9.8
2%
Jul 7
TOTOLINK LR350 V9.3.5u.6369_B20220309 was discovered to contain a command injection vulnerability via the hostname parameter in the setOpModeCfg function
Affected: 9.3.5u.6369_b20220309
CVE-2022-44255
9.8
2%
Nov 23
TOTOLINK LR350 V9.3.5u.6369_B20220309 contains a pre-authentication buffer overflow in the main function via long post data
Affected: 9.3.5u.6369_b20220309
CVE-2022-44252
9.8
2%
Nov 23
TOTOLINK NR1800X V9.1.0u.6279_B20210910 contains a command injection via the FileName parameter in the setUploadSetting function
Affected: 9.3.5u.6369_b20220309
CVE-2022-44251
9.8
2%
Nov 23
TOTOLINK NR1800X V9.1.0u.6279_B20210910 contains a command injection via the ussd parameter in the setUssd function
Affected: 9.3.5u.6369_b20220309
CVE-2022-44250
9.8
2%
Nov 23
TOTOLINK NR1800X V9.1.0u.6279_B20210910 contains a command injection via the hostName parameter in the setOpModeCfg function
Affected: 9.3.5u.6369_b20220309
CVE-2022-44249
9.8
2%
Nov 23
TOTOLINK NR1800X V9.1.0u.6279_B20210910 contains a command injection via the FileName parameter in the UploadFirmwareFile function
Affected: 9.3.5u.6369_b20220309
CVE-2024-10654
9.1
2%
Nov 1
A vulnerability has been found in TOTOLINK LR350 up to 9.3.5u.6369 and classified as critical
Affected: 9.3.5u.6369_b20220309
Showing 14